@atlasauth/cli 0.25.0 → 0.25.1

package/dist/migrate/export/pocketbase-config.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parsePocketBaseSchema = parsePocketBaseSchema;
+exports.translatePocketBaseConfig = translatePocketBaseConfig;
+const record_set_1 = require("./record-set");
+const source_lines_1 = require("./source-lines");
+const translate_kit_1 = require("./translate-kit");
+function parsePocketBaseSchema(text) {
+    const parsed = JSON.parse(text);
+    if (Array.isArray(parsed))
+        return (0, record_set_1.objs)(parsed);
+    if ((0, record_set_1.isObj)(parsed) && Array.isArray(parsed.collections))
+        return (0, record_set_1.objs)(parsed.collections);
+    throw new Error('Not a PocketBase collections export (expected a JSON array of collections).');
+}
+/** Options of a collection, wherever this PocketBase version keeps them. */
+function optionsOf(c) {
+    const o = typeof c.options === 'string' ? safeJson(c.options) : c.options;
+    return { ...((0, record_set_1.isObj)(o) ? o : {}), ...c };
+}
+function safeJson(s) {
+    try {
+        return JSON.parse(s);
+    }
+    catch {
+        return undefined;
+    }
+}
+function translatePocketBaseConfig(snap) {
+    const b = new translate_kit_1.ConfigBuilder();
+    const auth = snap.collections.filter((c) => (0, record_set_1.str)(c.type) === 'auth' && (0, record_set_1.str)(c.name) !== '_superusers');
+    const main = auth.find((c) => (0, record_set_1.str)(c.name) === 'users') ?? auth[0];
+    if (!main) {
+        b.add('manual', 'collections', '_collections', 'No auth collection found: nothing to translate.');
+        return b.result(snap.file?.path ?? 'pocketbase _collections');
+    }
+    const name = (0, record_set_1.str)(main.name);
+    const o = optionsOf(main);
+    const file = snap.file;
+    // Lines are searched from the collection's own "name" key onwards.
+    const start = file ? Math.max(0, file.text.search(new RegExp(`"name"\\s*:\\s*"${name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}"`))) : 0;
+    const line = (...keys) => {
+        if (!file)
+            return undefined;
+        // The collection's "id" may come before "name": search the whole object for the first key.
+        const from = file.text.lastIndexOf('{', start);
+        let at = from < 0 ? 0 : from;
+        for (const k of keys) {
+            const i = file.text.indexOf(`"${k}"`, at);
+            if (i < 0)
+                return undefined;
+            at = i + k.length + 2;
+        }
+        return (0, source_lines_1.lineAt)(file.text, at);
+    };
+    const where = (...keys) => {
+        const l = line(...keys);
+        return { f: l ? file.path : undefined, l };
+    };
+    const area = `collection ${name}`;
+    const put = (status, keys, note, atlas) => {
+        const w = where(...keys);
+        (0, source_lines_1.addAt)(b, w.f, w.l, status, area, keys.join('.'), note, atlas);
+    };
+    if (auth.length > 1) {
+        b.add('differs', 'collections', 'auth collections', `${auth.length} auth collections (${auth.map((c) => (0, record_set_1.str)(c.name)).join(', ')}): Atlas has one user pool per instance. Their records are imported together, each tagged with private_metadata.pocketbase_collection; use app roles to tell them apart.`, 'users');
+    }
+    // ── password and identity fields ──
+    const pa = (0, record_set_1.isObj)(o.passwordAuth) ? o.passwordAuth : undefined;
+    if (pa) {
+        const on = pa.enabled !== false;
+        b.set('strategies.password', on);
+        if (on)
+            put('mapped', ['passwordAuth', 'enabled'], 'Password sign-in. Imported bcrypt hashes verify as they are and are upgraded to Argon2id.', 'auth_config.strategies.password');
+        const fields = (0, record_set_1.strs)(pa.identityFields);
+        if (fields.includes('username')) {
+            b.set('strategies.username', true);
+            put('mapped', ['passwordAuth', 'identityFields'], 'Username sign-in.', 'auth_config.strategies.username');
+        }
+        const other = fields.filter((f) => f !== 'email' && f !== 'username');
+        if (other.length)
+            put('manual', ['passwordAuth', 'identityFields'], `Sign-in by ${other.join(', ')} has no Atlas equivalent: those users sign in by email or username.`);
+    }
+    else if (typeof o.allowEmailAuth === 'boolean' || typeof o.allowUsernameAuth === 'boolean') {
+        // ≤0.22
+        const email = o.allowEmailAuth === true;
+        const username = o.allowUsernameAuth === true;
+        b.set('strategies.password', email || username);
+        if (email || username)
+            put('mapped', ['allowEmailAuth'], 'Password sign-in. Imported bcrypt hashes verify as they are and are upgraded to Argon2id.', 'auth_config.strategies.password');
+        if (username) {
+            b.set('strategies.username', true);
+            put('mapped', ['allowUsernameAuth'], 'Username sign-in.', 'auth_config.strategies.username');
+        }
+    }
+    const minPw = typeof o.minPasswordLength === 'number' ? o.minPasswordLength : passwordFieldMin(main);
+    if (minPw !== undefined) {
+        b.set('passwordPolicy.minLength', Math.max(8, minPw));
+        put(minPw < 8 ? 'differs' : 'mapped', typeof o.minPasswordLength === 'number' ? ['minPasswordLength'] : ['fields', 'password', 'min'], minPw < 8 ? `PocketBase allows ${minPw}; Atlas requires at least 8 (existing passwords still sign in).` : `${minPw} characters minimum.`, 'auth_config.passwordPolicy.minLength');
+    }
+    if (o.onlyVerified === true) {
+        b.set('requireEmailVerification', true);
+        put('mapped', ['onlyVerified'], 'Only verified users may sign in.', 'auth_config.requireEmailVerification');
+    }
+    if ((0, record_set_1.strs)(o.onlyEmailDomains).length)
+        put('manual', ['onlyEmailDomains'], `Sign-up limited to ${(0, record_set_1.strs)(o.onlyEmailDomains).join(', ')}: add these domains to the Atlas allowlist (restrictions.allowlistOnly).`, 'auth_config.restrictions');
+    if ((0, record_set_1.strs)(o.exceptEmailDomains).length)
+        put('manual', ['exceptEmailDomains'], `Blocked domains ${(0, record_set_1.strs)(o.exceptEmailDomains).join(', ')}: add them to the Atlas blocklist.`, 'blocklist');
+    // ── OAuth2 ──
+    const oauth = (0, record_set_1.isObj)(o.oauth2) ? o.oauth2 : undefined;
+    if (oauth?.enabled === true || o.allowOAuth2Auth === true) {
+        const providers = (0, record_set_1.objs)(oauth?.providers);
+        for (const p of providers) {
+            const pname = (0, record_set_1.str)(p.name);
+            if (!pname)
+                continue;
+            const atlas = (0, translate_kit_1.socialKey)(pname);
+            const w = where('oauth2', 'providers', pname);
+            if (atlas) {
+                b.socialProvider({ atlasKey: atlas, vendorName: pname, area: `${area} oauth2`, setting: `oauth2.providers.${pname}`, clientId: (0, record_set_1.str)(p.clientId) });
+                if (w.l)
+                    Object.assign(b.report[b.report.length - 1], { file: w.f, line: w.l });
+            }
+            else {
+                (0, source_lines_1.addAt)(b, w.f, w.l, 'manual', `${area} oauth2`, `oauth2.providers.${pname}`, `"${pname}" is not an Atlas built-in provider: add it as a custom OAuth/OIDC provider with the same client id${(0, record_set_1.str)(p.clientId) ? ` (${(0, record_set_1.str)(p.clientId)})` : ''} and authorization / token / userinfo URLs.`, 'custom_oauth_providers');
+            }
+        }
+        if (!providers.length)
+            put('manual', ['allowOAuth2Auth'], 'OAuth2 is on but the providers live in the app settings (≤0.22): add each one in the Atlas dashboard with the same client id so imported links keep working.', 'oauth_providers');
+        const mapped = (0, record_set_1.isObj)(oauth?.mappedFields) ? oauth.mappedFields : undefined;
+        if (mapped && Object.values(mapped).some((v) => (0, record_set_1.str)(v)))
+            put('differs', ['oauth2', 'mappedFields'], 'PocketBase copies provider fields onto the record; Atlas fills first/last name and image from the provider profile automatically.', 'user profile');
+    }
+    // ── OTP and MFA ──
+    const otp = (0, record_set_1.isObj)(o.otp) ? o.otp : undefined;
+    if (otp?.enabled === true) {
+        b.set('strategies.emailCode', true);
+        put('mapped', ['otp', 'enabled'], 'One-time email codes become Atlas email-code sign-in.', 'auth_config.strategies.emailCode');
+        if (typeof otp.duration === 'number')
+            put('differs', ['otp', 'duration'], `Codes live ${otp.duration} s in PocketBase; set verification.emailCode.ttlMinutes (whole minutes).`, 'auth_config.verification.emailCode.ttlMinutes');
+        if (typeof otp.length === 'number' && otp.length !== 6)
+            put('differs', ['otp', 'length'], `PocketBase sends ${otp.length}-digit codes; Atlas's length is set in verification.emailCode.length.`, 'auth_config.verification.emailCode.length');
+    }
+    const mfa = (0, record_set_1.isObj)(o.mfa) ? o.mfa : undefined;
+    if (mfa?.enabled === true) {
+        b.set('mfaPolicy', (0, record_set_1.str)(mfa.rule) ? 'optional' : 'required');
+        put('differs', ['mfa', 'enabled'], `PocketBase MFA asks for a second, different sign-in method (password then OTP)${(0, record_set_1.str)(mfa.rule) ? ` when "${(0, record_set_1.str)(mfa.rule)}" matches` : ''}. Atlas MFA is an enrolled second factor (authenticator app, SMS, passkey or email code): users enrol one after the move.`, 'auth_config.mfaPolicy');
+    }
+    // ── tokens, rules, emails ──
+    const token = (0, record_set_1.isObj)(o.authToken) ? o.authToken : undefined;
+    if (typeof token?.duration === 'number' && token.duration > 0) {
+        const ms = (0, translate_kit_1.clampSessionMs)(token.duration * 1000);
+        b.set('session.absoluteMs', ms);
+        put(ms === token.duration * 1000 ? 'mapped' : 'differs', ['authToken', 'duration'], `Auth tokens last ${token.duration} s; Atlas sessions last as long (and refresh short-lived session tokens on their own). The token secret is not copied.`, 'auth_config.session.absoluteMs');
+    }
+    if ((0, record_set_1.str)(o.authRule))
+        put('manual', ['authRule'], `Sign-in is limited by the rule "${(0, record_set_1.str)(o.authRule)}": express it as an Atlas pre-sign-in action or restriction.`, 'actions');
+    if ((0, record_set_1.str)(o.manageRule))
+        put('manual', ['manageRule'], `"${(0, record_set_1.str)(o.manageRule)}" may manage other users: give those users an Atlas app role with the users:write permission.`, 'roles');
+    if ((0, record_set_1.isObj)(o.authAlert) && o.authAlert.enabled === true)
+        put('manual', ['authAlert', 'enabled'], 'New-device sign-in alerts: enable Atlas\'s new sign-in notification email (Emails).');
+    for (const tpl of ['verificationTemplate', 'resetPasswordTemplate', 'confirmEmailChangeTemplate']) {
+        if ((0, record_set_1.isObj)(o[tpl]) && (0, record_set_1.str)(o[tpl].body))
+            put('manual', [tpl], 'Custom email template: recreate it in Atlas Emails (Atlas variables differ).', 'email_templates');
+    }
+    const vars = { collection: name };
+    if (snap.url)
+        vars.url = snap.url.replace(/\/+$/, '');
+    return b.result(file?.path ?? `pocketbase collection ${name}`, {
+        bridge: { preset: 'pocketbase', vars: { ...vars } },
+        lazy: { preset: 'pocketbase', config: { ...vars } },
+    });
+}
+/** v0.23+ keeps the minimum length on the password field. */
+function passwordFieldMin(c) {
+    const fields = typeof c.fields === 'string' ? safeJson(c.fields) : c.fields;
+    const pw = (0, record_set_1.objs)(fields).find((f) => (0, record_set_1.str)(f.name) === 'password' && (0, record_set_1.str)(f.type) === 'password');
+    return typeof pw?.min === 'number' && pw.min > 0 ? pw.min : undefined;
+}
+//# sourceMappingURL=pocketbase-config.js.map

package/dist/migrate/export/pocketbase-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocketbase-config.js","sourceRoot":"","sources":["../../../src/migrate/export/pocketbase-config.ts"],"names":[],"mappings":";;AA2BA,sDAKC;AAgBD,8DAkIC;AAjLD,6CAAgE;AAChE,iDAA+C;AAC/C,mDAA2E;AAwB3E,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,IAAA,iBAAI,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxF,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;AACjG,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,CAAM;IACvB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1E,OAAO,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA8B;IACtE,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,iDAAiD,CAAC,CAAC;QAClG,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,yBAAyB,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,IAAI,CAAC,IAAI,CAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,MAAM,IAAI,GAAG,CAAC,GAAG,IAAc,EAAsB,EAAE;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,2FAA2F;QAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC5B,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,IAAA,qBAAM,EAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAc,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,cAAc,IAAI,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAuC,EAAE,IAAc,EAAE,IAAY,EAAE,KAAc,EAAE,EAAE;QACpG,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACzB,IAAA,oBAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC;IAEF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,MAAM,sBAAsB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0KAA0K,EAAE,OAAO,CAAC,CAAC;IACtT,CAAC;IAED,qCAAqC;IACrC,MAAM,EAAE,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE;YAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,2FAA2F,EAAE,iCAAiC,CAAC,CAAC;QACnL,MAAM,MAAM,GAAG,IAAA,iBAAI,EAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACnC,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM;YAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAC,EAAE,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAC3K,CAAC;SAAM,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC7F,QAAQ;QACR,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,IAAI,QAAQ,CAAC,CAAC;QAChD,IAAI,KAAK,IAAI,QAAQ;YAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,2FAA2F,EAAE,iCAAiC,CAAC,CAAC;QACzL,IAAI,QAAQ,EAAE,CAAC;YACb,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACnC,GAAG,CAAC,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,iEAAiE,CAAC,CAAC,CAAC,GAAG,KAAK,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IAC3T,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5B,CAAC,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,CAAC,EAAE,kCAAkC,EAAE,sCAAsC,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,IAAA,iBAAI,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0EAA0E,EAAE,0BAA0B,CAAC,CAAC;IAC1O,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,IAAA,iBAAI,EAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,EAAE,WAAW,CAAC,CAAC;IAExL,eAAe;IACf,MAAM,KAAK,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,IAAI,KAAK,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAA,iBAAI,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,KAAK,GAAG,IAAA,yBAAS,EAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,CAAC;gBACV,CAAC,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,SAAS,EAAE,OAAO,EAAE,oBAAoB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAClJ,IAAI,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;iBAAM,CAAC;gBACN,IAAA,oBAAK,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,SAAS,EAAE,oBAAoB,KAAK,EAAE,EAAE,IAAI,KAAK,sGAAsG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,6CAA6C,EAAE,wBAAwB,CAAC,CAAC;YACpT,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,8JAA8J,EAAE,iBAAiB,CAAC,CAAC;QAC7O,MAAM,MAAM,GAAG,IAAA,kBAAK,EAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,mIAAmI,EAAE,cAAc,CAAC,CAAC;IAC3P,CAAC;IAED,oBAAoB;IACpB,MAAM,GAAG,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACpC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,uDAAuD,EAAE,kCAAkC,CAAC,CAAC;QAC/H,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,CAAC,QAAQ,0EAA0E,EAAE,+CAA+C,CAAC,CAAC;QACjO,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,CAAC,MAAM,uEAAuE,EAAE,2CAA2C,CAAC,CAAC;IAChP,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,IAAI,GAAG,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1B,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,iFAAiF,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,2HAA2H,EAAE,uBAAuB,CAAC,CAAC;IACnU,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,IAAI,OAAO,KAAK,EAAE,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,oBAAoB,KAAK,CAAC,QAAQ,wHAAwH,EAAE,gCAAgC,CAAC,CAAC;IACpR,CAAC;IACD,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,mCAAmC,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,8DAA8D,EAAE,SAAS,CAAC,CAAC;IAC9K,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,+FAA+F,EAAE,OAAO,CAAC,CAAC;IACpL,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI;QAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,qFAAqF,CAAC,CAAC;IACvL,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,4BAA4B,CAAC,EAAE,CAAC;QAClG,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAA,gBAAG,EAAE,CAAC,CAAC,GAAG,CAAS,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,8EAA8E,EAAE,iBAAiB,CAAC,CAAC;IAC1K,CAAC;IAED,MAAM,IAAI,GAA2B,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,yBAAyB,IAAI,EAAE,EAAE;QAC7D,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE;QACnD,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE;KACpD,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,SAAS,gBAAgB,CAAC,CAAM;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5E,MAAM,EAAE,GAAG,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC;IAC9F,OAAO,OAAO,EAAE,EAAE,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC"}

package/dist/migrate/export/pocketbase.d.ts

@@ -0,0 +1,52 @@
+import { RecordSet, type Obj } from './record-set';
+/**
+ * `atlas migrate export pocketbase` — a PocketBase app's auth collections.
+ *
+ * PocketBase's REST API never returns a password hash or a token key (they
+ * are stripped from every record, superusers included), so the export reads
+ * the SQLite database: `pb_data/data.db` directly through Node's built-in
+ * `node:sqlite` (read-only; stop the server or copy the file with its -wal
+ * and -shm first), or a dump directory the owner made with `sqlite3 -json`
+ * (one `<table>.json` per table: `_collections`, each auth collection, and
+ * `_externalAuths`). Nothing connects to a running PocketBase.
+ *
+ * What moves: every auth collection's records (v0.23+ `password`, ≤0.22
+ * `passwordHash`, both Go bcrypt), email + verified, username, name, avatar
+ * (as a file URL when the PocketBase URL is given), custom fields as public
+ * metadata, and OAuth2 links from `_externalAuths`. Superusers (`_superusers`,
+ * or ≤0.22 `_admins`) stay behind unless asked for. `_mfas` and `_otps` hold
+ * one-time sign-in state, not enrolments: nothing to carry. Tokens are HS256
+ * signed with a per-record key, so the bridge asks PocketBase about them
+ * (`pocketbase` bridge preset) instead of importing sessions.
+ */
+export interface PocketBaseTables {
+    /** `_collections` rows (`id, name, type, options, fields` or ≤0.22 `schema`). */
+    collections: Obj[];
+    /** Rows by table name. */
+    tables: Map<string, Obj[]>;
+}
+export interface PocketBaseExportOptions {
+    /** Auth collections to export (default: every auth collection except `_superusers`). */
+    collections?: string[];
+    includeSuperusers?: boolean;
+    /** The public PocketBase URL, to turn avatar file names into URLs. */
+    url?: string;
+    /** Shown in the dashboard as where the data came from (a file path, never a credential). */
+    origin?: string;
+}
+export declare function exportPocketBase(db: PocketBaseTables, opts?: PocketBaseExportOptions): RecordSet;
+/** PocketBase stores `2024-01-02 03:04:05.123Z`; the bundle wants ISO-8601. */
+export declare function pbTime(v: unknown): string | undefined;
+/**
+ * A dump directory: one file per table (`_collections.json`, `users.json`,
+ * `_externalAuths.json` …) as `sqlite3 -json` writes it (a JSON array), NDJSON,
+ * or CSV with a header row.
+ */
+export declare function readPocketBaseDump(dir: string): PocketBaseTables;
+export declare function parseTable(text: string, ext: string): Obj[];
+/**
+ * `pb_data/data.db` through Node's built-in SQLite (Node 22.5+), opened
+ * read-only. Reads `_collections`, every auth collection's table and
+ * `_externalAuths` — nothing else.
+ */
+export declare function readPocketBaseDb(path: string): Promise<PocketBaseTables>;

package/dist/migrate/export/pocketbase.js

@@ -0,0 +1,243 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportPocketBase = exportPocketBase;
+exports.pbTime = pbTime;
+exports.readPocketBaseDump = readPocketBaseDump;
+exports.parseTable = parseTable;
+exports.readPocketBaseDb = readPocketBaseDb;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const csv_1 = require("../../import/csv");
+const record_set_1 = require("./record-set");
+/** Fields every auth record has that are not metadata. */
+const SYSTEM_FIELDS = new Set([
+    'id', 'email', 'emailVisibility', 'verified', 'password', 'passwordHash', 'tokenKey', 'username', 'name', 'avatar', 'created', 'updated',
+    'lastResetSentAt', 'lastVerificationSentAt', 'lastLoginAlertSentAt',
+]);
+function exportPocketBase(db, opts = {}) {
+    const set = new record_set_1.RecordSet();
+    const auth = db.collections.filter((c) => (0, record_set_1.str)(c.type) === 'auth');
+    const wanted = opts.collections?.length ? new Set(opts.collections) : null;
+    const chosen = auth.filter((c) => {
+        const name = (0, record_set_1.str)(c.name) ?? '';
+        if (wanted)
+            return wanted.has(name);
+        return name !== '_superusers' || opts.includeSuperusers === true;
+    });
+    if (wanted)
+        for (const name of wanted)
+            if (!auth.some((c) => (0, record_set_1.str)(c.name) === name))
+                set.warn(`"${name}" is not an auth collection in this database and was skipped.`);
+    if (!auth.length)
+        set.warn('No auth collection found in _collections: is this a PocketBase data.db (or a dump of it)?');
+    if (db.tables.has('_admins') && opts.includeSuperusers)
+        set.warn('PocketBase ≤0.22 admins (_admins) are not exported: create them again as Atlas instance admins.');
+    const userIds = new Set();
+    const multiple = chosen.length > 1;
+    for (const c of chosen) {
+        const name = (0, record_set_1.str)(c.name);
+        const collectionId = (0, record_set_1.str)(c.id) ?? name;
+        const rows = db.tables.get(name) ?? db.tables.get(name.toLowerCase()) ?? [];
+        if (!rows.length)
+            set.warn(`The auth collection "${name}" has no rows in the export (was its table dumped?).`);
+        for (const r of rows) {
+            const id = (0, record_set_1.str)(r.id);
+            if (!id)
+                continue;
+            if (userIds.has(id)) {
+                set.omit('user', 'record id already exported from another auth collection');
+                continue;
+            }
+            const user = mapRecord(r, { collection: name, collectionId, url: opts.url, tag: multiple || name !== 'users' });
+            if (!user) {
+                set.omit('user', 'record without an email or username');
+                continue;
+            }
+            userIds.add(id);
+            set.add('user', (0, record_set_1.compact)(user));
+        }
+    }
+    if (set.list('user').some((u) => !u.password))
+        set.warn('Some records have no password hash (OAuth2- or OTP-only users): they keep signing in with those methods.');
+    // OAuth2 links: v0.23+ collectionRef/recordRef, ≤0.22 collectionId/recordId.
+    for (const e of db.tables.get('_externalauths') ?? db.tables.get('_externalAuths') ?? []) {
+        const userId = (0, record_set_1.str)(e.recordRef) ?? (0, record_set_1.str)(e.recordId);
+        const provider = (0, record_set_1.str)(e.provider);
+        const providerId = (0, record_set_1.str)(e.providerId);
+        if (!userId || !provider || !providerId || !userIds.has(userId))
+            continue;
+        set.add('identity', (0, record_set_1.compact)({ id: (0, record_set_1.str)(e.id), user_id: userId, provider, provider_user_id: providerId, kind: 'oauth' }), `${provider}:${providerId}`);
+    }
+    const providers = new Set(set.list('identity').map((i) => i.provider));
+    set.manifest = { ...set.manifest, origin: opts.origin ?? 'pocketbase data.db', providers: [...providers].sort() };
+    set.warn('PocketBase auth tokens are signed per record and cannot be imported: enable the pocketbase bridge preset so signed-in users move without a new sign-in.');
+    return set;
+}
+function mapRecord(r, ctx) {
+    const email = (0, record_set_1.str)(r.email)?.toLowerCase();
+    const username = (0, record_set_1.str)(r.username);
+    if (!email && !username)
+        return null;
+    const hash = (0, record_set_1.str)(r.password) ?? (0, record_set_1.str)(r.passwordHash);
+    const avatar = (0, record_set_1.str)(r.avatar);
+    const meta = {};
+    for (const [k, v] of Object.entries(r)) {
+        if (SYSTEM_FIELDS.has(k) || v === null || v === '' || v === undefined)
+            continue;
+        meta[k] = parseJsonish(v);
+    }
+    return {
+        id: (0, record_set_1.str)(r.id),
+        emails: email ? [{ email, verified: truthy(r.verified), primary: true }] : undefined,
+        username,
+        name: (0, record_set_1.str)(r.name),
+        image_url: avatar && ctx.url ? `${ctx.url.replace(/\/+$/, '')}/api/files/${encodeURIComponent(ctx.collectionId)}/${encodeURIComponent((0, record_set_1.str)(r.id))}/${encodeURIComponent(avatar)}` : undefined,
+        password: hash && /^\$2[aby]\$\d{2}\$/.test(hash) ? { algorithm: 'auto', hash } : undefined,
+        public_metadata: Object.keys(meta).length ? meta : undefined,
+        private_metadata: ctx.tag ? { pocketbase_collection: ctx.collection } : undefined,
+        created_at: pbTime(r.created),
+    };
+}
+/** PocketBase stores `2024-01-02 03:04:05.123Z`; the bundle wants ISO-8601. */
+function pbTime(v) {
+    const s = (0, record_set_1.str)(v);
+    if (!s)
+        return undefined;
+    return /^\d{4}-\d{2}-\d{2} \d/.test(s) ? s.replace(' ', 'T') : s;
+}
+const truthy = (v) => v === true || v === 1 || v === '1' || v === 'true';
+/** JSON / multi-select / relation fields come out of SQLite as JSON text. */
+function parseJsonish(v) {
+    if (typeof v !== 'string')
+        return v;
+    const t = v.trim();
+    if ((t.startsWith('{') && t.endsWith('}')) || (t.startsWith('[') && t.endsWith(']'))) {
+        try {
+            return JSON.parse(t);
+        }
+        catch {
+            return v;
+        }
+    }
+    return v;
+}
+// ── readers ─────────────────────────────────────────────────────────────────
+function tablesFrom(byName) {
+    const collections = (byName.get('_collections') ?? []).map((c) => ({ ...c, options: parseJsonish(c.options), fields: parseJsonish(c.fields ?? c.schema) }));
+    return { collections, tables: byName };
+}
+/**
+ * A dump directory: one file per table (`_collections.json`, `users.json`,
+ * `_externalAuths.json` …) as `sqlite3 -json` writes it (a JSON array), NDJSON,
+ * or CSV with a header row.
+ */
+function readPocketBaseDump(dir) {
+    const byName = new Map();
+    for (const file of (0, node_fs_1.readdirSync)(dir).sort()) {
+        const path = (0, node_path_1.join)(dir, file);
+        const ext = (0, node_path_1.extname)(file).toLowerCase();
+        if (!(0, node_fs_1.statSync)(path).isFile() || !['.json', '.ndjson', '.jsonl', '.csv'].includes(ext))
+            continue;
+        const rows = parseTable((0, node_fs_1.readFileSync)(path, 'utf8'), ext);
+        const name = (0, node_path_1.basename)(file, (0, node_path_1.extname)(file));
+        byName.set(name, rows);
+        if (name.toLowerCase() !== name)
+            byName.set(name.toLowerCase(), rows);
+    }
+    return tablesFrom(byName);
+}
+function parseTable(text, ext) {
+    if (ext === '.csv')
+        return (0, csv_1.parseCsv)(text);
+    if (ext === '.ndjson' || ext === '.jsonl') {
+        return text
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter(Boolean)
+            .map((l) => JSON.parse(l))
+            .filter(record_set_1.isObj);
+    }
+    const t = text.trim();
+    if (!t)
+        return [];
+    const parsed = JSON.parse(t);
+    if (Array.isArray(parsed))
+        return parsed.filter(record_set_1.isObj);
+    if ((0, record_set_1.isObj)(parsed) && Array.isArray(parsed.rows))
+        return parsed.rows.filter(record_set_1.isObj);
+    if ((0, record_set_1.isObj)(parsed) && Array.isArray(parsed.items))
+        return parsed.items.filter(record_set_1.isObj);
+    return [];
+}
+/**
+ * `pb_data/data.db` through Node's built-in SQLite (Node 22.5+), opened
+ * read-only. Reads `_collections`, every auth collection's table and
+ * `_externalAuths` — nothing else.
+ */
+async function readPocketBaseDb(path) {
+    const spec = 'node:sqlite';
+    let mod;
+    try {
+        mod = (await Promise.resolve(`${spec}`).then(s => __importStar(require(s))));
+    }
+    catch {
+        throw new Error('This Node.js has no built-in SQLite (node:sqlite, Node 22.5+). Dump the tables with sqlite3 -json instead and pass the folder with --set pocketbase-dump=<dir>.');
+    }
+    const db = new mod.DatabaseSync(path, { readOnly: true });
+    try {
+        const all = (sql) => db.prepare(sql).all().filter(record_set_1.isObj);
+        const has = new Set(all("SELECT name FROM sqlite_master WHERE type = 'table'").map((r) => (0, record_set_1.str)(r.name)).filter((n) => !!n));
+        if (!has.has('_collections'))
+            throw new Error(`${path} has no _collections table: it is not a PocketBase data.db.`);
+        const byName = new Map();
+        const q = (name) => `"${name.replace(/"/g, '""')}"`;
+        byName.set('_collections', all('SELECT * FROM _collections'));
+        for (const c of byName.get('_collections')) {
+            const name = (0, record_set_1.str)(c.name);
+            if (name && (0, record_set_1.str)(c.type) === 'auth' && has.has(name))
+                byName.set(name, all(`SELECT * FROM ${q(name)}`));
+        }
+        if (has.has('_externalAuths'))
+            byName.set('_externalAuths', all('SELECT * FROM _externalAuths'));
+        if (has.has('_admins'))
+            byName.set('_admins', []);
+        return tablesFrom(byName);
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=pocketbase.js.map

package/dist/migrate/export/pocketbase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocketbase.js","sourceRoot":"","sources":["../../../src/migrate/export/pocketbase.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,4CAmDC;AA2BD,wBAIC;AA8BD,gDAYC;AAED,gCAiBC;AAYD,4CA0BC;AAvOD,qCAA8D;AAC9D,yCAAoD;AAEpD,0CAA4C;AAC5C,6CAAwE;AAwCxE,0DAA0D;AAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACxI,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB;CACpE,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAAC,EAAoB,EAAE,OAAgC,EAAE;IACvF,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,IAAI,MAAM;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,+DAA+D,CAAC,CAAC;IACtK,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IACxH,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;IAEpK,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,sDAAsD,CAAC,CAAC;QAC/G,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,yDAAyD,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;YAChH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;IAEpK,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;IAChK,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,oBAAoB,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAClH,GAAG,CAAC,IAAI,CAAC,yJAAyJ,CAAC,CAAC;IACpK,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAM,EAAE,GAA6E;IACtG,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAChF,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAE;QACd,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,QAAQ;QACR,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC;QACjB,SAAS,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAE,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC7L,QAAQ,EAAE,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3F,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC5D,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;QACjF,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAgB,MAAM,CAAC,CAAU;IAC/B,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AAE3F,6EAA6E;AAC7E,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAE/E,SAAS,UAAU,CAAC,MAA0B;IAC5C,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5J,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAChG,MAAM,IAAI,GAAG,UAAU,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,UAAU,CAAC,IAAY,EAAE,GAAW;IAClD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAA,cAAQ,EAAC,IAAI,CAAU,CAAC;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI;aACR,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;aACpC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACvD,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IAClF,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACpF,OAAO,EAAE,CAAC;AACZ,CAAC;AAOD;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC;IAC3B,IAAI,GAA8E,CAAC;IACnF,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,yBAAa,IAAI,uCAAC,CAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iKAAiK,CAAC,CAAC;IACrL,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6DAA6D,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/migrate/export/project-files.d.ts

@@ -0,0 +1,15 @@
+import type { CredentialSpec, PluginContext } from '../framework/plugin';
+/**
+ * A config file the vendor keeps in the app's repository (appwrite.json,
+ * nhost/nhost.toml, pb_schema.json): the path named by the flag / env var, or
+ * the first of `candidates` that exists in the project folder. The report
+ * shows the path relative to the project.
+ */
+export declare function projectFile(p: PluginContext, spec: CredentialSpec, candidates: string[]): {
+    path: string;
+    text: string;
+} | undefined;
+/** A folder the owner named (a table dump), or the first candidate folder that exists in the project. */
+export declare function projectDir(p: PluginContext, spec: CredentialSpec, candidates?: string[]): string | undefined;
+/** `--set name=true` / an env var set to true, 1 or yes. */
+export declare function truthyCredential(p: PluginContext, spec: CredentialSpec): boolean;

package/dist/migrate/export/project-files.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectFile = projectFile;
+exports.projectDir = projectDir;
+exports.truthyCredential = truthyCredential;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const plugin_kit_1 = require("./plugin-kit");
+/**
+ * A config file the vendor keeps in the app's repository (appwrite.json,
+ * nhost/nhost.toml, pb_schema.json): the path named by the flag / env var, or
+ * the first of `candidates` that exists in the project folder. The report
+ * shows the path relative to the project.
+ */
+function projectFile(p, spec, candidates) {
+    const named = p.credential({ ...spec, required: false });
+    if (named)
+        return { path: named, text: (0, plugin_kit_1.localFile)(p, spec, 'text') };
+    for (const c of candidates) {
+        const full = (0, node_path_1.resolve)(p.project, c);
+        if ((0, node_fs_1.existsSync)(full) && (0, node_fs_1.statSync)(full).isFile())
+            return { path: (0, node_path_1.relative)((0, node_path_1.resolve)(p.project), full) || c, text: p.ctx.readFile(full) };
+    }
+    return undefined;
+}
+/** A folder the owner named (a table dump), or the first candidate folder that exists in the project. */
+function projectDir(p, spec, candidates = []) {
+    const named = p.credential({ ...spec, required: false });
+    if (named)
+        return (0, node_path_1.resolve)(named);
+    for (const c of candidates) {
+        const full = (0, node_path_1.join)((0, node_path_1.resolve)(p.project), c);
+        if ((0, node_fs_1.existsSync)(full) && (0, node_fs_1.statSync)(full).isDirectory())
+            return full;
+    }
+    return undefined;
+}
+/** `--set name=true` / an env var set to true, 1 or yes. */
+function truthyCredential(p, spec) {
+    const v = p.credential({ ...spec, required: false });
+    return v !== undefined && /^(1|true|yes|on)$/i.test(v.trim());
+}
+//# sourceMappingURL=project-files.js.map

package/dist/migrate/export/project-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-files.js","sourceRoot":"","sources":["../../../src/migrate/export/project-files.ts"],"names":[],"mappings":";;AAWA,kCAQC;AAGD,gCAQC;AAGD,4CAGC;AApCD,qCAA+C;AAC/C,yCAAoD;AAEpD,6CAAyC;AAEzC;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,CAAgB,EAAE,IAAoB,EAAE,UAAoB;IACtF,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAA,sBAAS,EAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAE,EAAE,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACxI,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yGAAyG;AACzG,SAAgB,UAAU,CAAC,CAAgB,EAAE,IAAoB,EAAE,aAAuB,EAAE;IAC1F,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,SAAgB,gBAAgB,CAAC,CAAgB,EAAE,IAAoB;IACrE,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/migrate/export/propelauth-config.d.ts

@@ -0,0 +1,18 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type VendorHttp } from './vendor-http';
+/**
+ * `atlas migrate propelauth config` — what PropelAuth's backend API exposes
+ * about a project's configuration: the custom role mappings, and which
+ * organizations have SAML set up. Login methods, password and MFA rules,
+ * session lifetimes, branding and the hosted-page settings live only in the
+ * PropelAuth dashboard: the report lists each as manual with where to find it.
+ */
+export interface PropelauthConfigSnapshot {
+    authUrl: string;
+    /** Names of the custom role mappings (shape UNCONFIRMED: tolerated as objects or bare names). */
+    roleMappings: string[];
+    orgs: number;
+    samlOrgs: number;
+}
+export declare function fetchPropelauthConfig(http: VendorHttp, authUrl: string): Promise<PropelauthConfigSnapshot>;
+export declare function translatePropelauthConfig(snap: PropelauthConfigSnapshot): TranslationResult;